Authorization

Authorization determines whether a user can access an application or resource after authentication. It ensures that each user interacts only with the information and features that align with their business role and responsibilities.

In the Aikyam Identity Platform, authorization uses a role‑based and group‑based access model. Access decisions are derived from predefined permissions, roles, and group assignments within each application. These configurations ensure that user access is consistent, secure, and aligned with business requirements.

After the identity provider authenticates the user, the platform redirects the user to the application. The platform evaluates the user’s group membership, assigned roles, and role‑based permissions to determine what the user can access. This model enforces least‑privileged access.

The platform’s authorization framework is organized into the following core areas, which you can explore in the related sections for a deeper understanding of how access is modeled, evaluated, and maintained across applications:

• Access modeling components: Defines how roles, groups, and permissions are structured and organized within an application.
• Identity attributes and group‑based inheritance: Explains how user attributes and group memberships determine inherited access.
• Access control models: Describes the methods used to evaluate and enforce user access, such as role‑based and permission‑based controls.
• Authorization lifecycle: Outlines how user access is created, updated, reviewed, and removed over time.